CVE-2023-24508

CVSS V2 None CVSS V3 None

Description

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.

Overview

CVE ID
CVE-2023-24508

Assigner
security@baicells.com

Vulnerability Status
Analyzed

Published Version
2023-01-26T21:18:19

Last Modified Date
2023-02-08T21:29:17

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version End
		AND
cpe:2.3:o:baicells:rtd_firmware::::::::	1	OR	3.7.11.6
cpe:2.3:o:baicells:rts_firmware::::::::	1	OR	3.7.11.6
cpe:2.3:h:baicells:nova227:-:::::::*	0	OR
cpe:2.3:h:baicells:nova233:-:::::::*	0	OR
cpe:2.3:h:baicells:nova243:-:::::::*	0	OR
cpe:2.3:h:baicells:nova246:-:::::::*	0	OR

References

Reference URL	Reference Tags
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-24508
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24508

History

Created	Old Value	New Value	Data Type	Notes
2023-01-26 23:18:49				Added to TrackCVE
2023-01-26 23:18:51			Weakness Enumeration	new
2023-01-27 15:15:16		2023-01-27T14:03:31	CVE Modified Date	updated
2023-01-27 15:15:16	Received	Awaiting Analysis	Vulnerability Status	updated
2023-02-03 15:14:24	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-02-08 22:17:09		2023-02-08T21:29:17	CVE Modified Date	updated
2023-02-08 22:17:09	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-02-08 22:17:10			CPE Information	updated